CVE-2009-0306 describes a critical buffer overflow vulnerability in the IBM Lotus Notes Intellisync ActiveX control (lnresobject.dll) within BlackBerry Desktop Software versions prior to 5.0.1. This flaw allows remote attackers to execute arbitrary code on a user's system simply by enticing them to visit a specially crafted web page. With a CVSS score of 9.3, this vulnerability is highly severe, requiring no authentication and moderate attack complexity, but granting full confidentiality, integrity, and availability impact. While its EPSS score is low, indicating a low probability of exploitation, its FAUCET Risk Score is high at 81/100. Currently, there is no public exploit code available in Metasploit, Nuclei, or ExploitDB, and it is not listed in CISA's KEV catalog. The vulnerability has also received minimal community discussion and media coverage, suggesting a low level of public awareness or active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 5.0CPE matchmatch criteria | cpe:2.3:a:rim:blackberry_desktop_software:*:*:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:ibm:lotus_notes_intellisync:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.